CVE-2022-20699

This PoC exploits a stack-based buffer overflow in Cisco RV340 WAN's SSL VPN service (CVE-2022-20699) to achieve unauthenticated remote code execution. It sends a crafted payload to trigger the vulnerability via an HTTP POST request to port 8443.

This PoC exploits a stack-based buffer overflow in Cisco AnyConnect VPN (CVE-2022-20699) to achieve unauthenticated remote code execution. It sends a crafted payload to trigger the vulnerability via an HTTP POST request to the target's SSL VPN service.

The repository contains a functional exploit for CVE-2022-20699, a stack-based buffer overflow in Cisco RV340 VPN Gateway's SSL VPN service. The exploit includes a Python script that crafts a malicious payload to achieve remote code execution as root, along with a detailed technical writeup explaining the vulnerability and exploitation process.

This Metasploit module exploits a stack buffer overflow in Cisco RV340 SSL VPN (CVE-2022-20699) to achieve unauthenticated remote code execution. It uses custom ARMLE shellcode to establish a reverse root shell, targeting firmware versions <= 1.0.03.24.